Path Traversal

2022-10-0707:52:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rdiffweb

path traversal

dispatch.py

access restrictions

remote server

vulnerability

EPSS

0.001

Percentile

48.8%

JSON

rdiffweb is vulnerable to path traversal. The vulnerability exists in dispatch.py due to improper access restrictions allowing an attacker to traverse the file system accessing files or directories that are outside of the restricted directory on the remote server.